Viewing file:  test_shell_sh.py (2.4 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
from tests.base_test import BaseTest
from weevely.core.weexceptions import ArgparseError
from weevely.core.vectors import PhpCode
from weevely.core.vectors import Os
from weevely.core import modules
from weevely.core.sessions import SessionURL
from weevely.core import messages
import logging
import os
class SystemInfo(BaseTest):
def setUp(self):
self.session = SessionURL(self.url, self.password, volatile = True)
modules.load_modules(self.session)
self.run_argv = modules.loaded['shell_sh'].run_argv
def _spoil_vectors_but(self, vector_safe_name):
# Spoil all the module sessions but the safe one
for i in range(0, len(modules.loaded['shell_sh'].vectors)):
name = modules.loaded['shell_sh'].vectors[i].name
payload = modules.loaded['shell_sh'].vectors[i].arguments[0]
if name != vector_safe_name:
modules.loaded['shell_sh'].vectors[i] = PhpCode('\'"%s' % payload, name)
def test_run_unless(self):
vector_safe_name = 'proc_open'
self._spoil_vectors_but(vector_safe_name)
# Check correctness of execution
self.assertEqual(self.run_argv(["echo -n 1"]), "1");
# Check stored vector
self.assertEqual(self.session['shell_sh']['stored_args']['vector'], vector_safe_name)
def test_param_vector(self):
vector_safe_name = 'proc_open'
# Check correctness of execution
self.assertEqual(self.run_argv(["-vector", vector_safe_name, "echo -n 1"]), "1");
# Check stored vector
self.assertEqual(self.session['shell_sh']['stored_args']['vector'], vector_safe_name)
def test_vector_one_os(self):
bogus_vector = 'bogus_win'
# Add a bogus Os.WIN vector
modules.loaded['shell_sh'].vectors.append(PhpCode("echo(1);", name=bogus_vector, target=Os.WIN))
# Check if called forced the bogusv vector name, returns Null
self.assertRaises(ArgparseError, self.run_argv, ["-vector", bogus_vector, "echo 1"]);
def test_vector_all_os(self):
bogus_vector = 'bogus_win'
# Add a bogus Os.WIN vector
modules.loaded['shell_sh'].vectors.append(PhpCode("echo(1);", name=bogus_vector, target=Os.WIN))
# Spoil all vectors but bogus_win
self._spoil_vectors_but(bogus_vector)
# Check if looping all vectors still returns None
self.assertIsNone(self.run_argv(["echo 1"]), None);
|